api.remote.env.example

NODE_ENV=production
AGENTGATE_PROCESS_ROLE=api
HOST=0.0.0.0
PORT=4310
WEB_ORIGIN=https://agentgate.example.com
MCP_ALLOWED_HOSTS=agentgate.example.com
MCP_ALLOWED_ORIGINS=agentgate.example.com

# Built-in local login. This bootstrap password is consumed only when the
# persistent database has no local account; remove it after the first login.
HUMAN_AUTH_MODE=local
LOCAL_ADMIN_USERNAME=admin
LOCAL_ADMIN_PASSWORD=replace-with-a-unique-long-bootstrap-password
LOCAL_ADMIN_USER_ID=user-admin
LOCAL_SESSION_IDLE_SECONDS=1800
LOCAL_SESSION_ABSOLUTE_SECONDS=43200

# Optional alternative for an existing SSO/OIDC/identity gateway:
# HUMAN_AUTH_MODE=trusted_proxy
TRUSTED_PROXY_USER_HEADER=x-agentgate-user-id
AGENT_KEY_PEPPER=replace-with-a-long-random-secret
CREDENTIAL_ENCRYPTION_KEY=replace-with-an-independent-long-random-secret

# Image is used by both Site modes. Public URL is only used by Reverse deployments.
# Across shared or untrusted networks, use HTTPS. Always pin the deployment image by digest.
SITE_CONNECTOR_PUBLIC_URL=https://agentgate.example.com
SITE_CONNECTOR_IMAGE=registry.example.com/agentgate-site-connector@sha256:REPLACE_WITH_64_HEX

DATABASE_PATH=/srv/agentgate/database/agentgate.db
CAPABILITY_STORAGE_PATH=/srv/agentgate/capability-packages
RUNTIME_ARTIFACT_STORAGE_PATH=/srv/agentgate/runtime-artifacts
RUNTIME_RESULT_STAGING_PATH=/srv/agentgate/runtime-result-staging
RUNTIME_RESULT_STORAGE_PATH=/srv/agentgate/runtime-results
RUNTIME_RESULT_MAX_ARTIFACT_BYTES=1073741824
RUNTIME_RESULT_PREVIEW_BYTES=65536
RUNTIME_RESULT_TTL_MS=86400000
RUNTIME_RESULT_MAX_ACTIVE_JOBS_PER_KEY=4

# The provided API image contains uv and the same system Python as the Python
# Runtime image. Set disabled when Runtime Versions are built elsewhere.
RUNTIME_BUILDER=local_uv
RUNTIME_BUILDER_HOME=/tmp

CAPABILITY_RUNNER=remote
CAPABILITY_RUNNER_SOCKET=/run/user/1000/agentgate/runner.sock
CAPABILITY_RUNNER_SECRET_FILE=/run/agentgate-secrets/runner.shared-secret